H3C Magic M 安全漏洞

H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M that stems from the use of a default password that could lead to remote execution of arbitrary code...

CVE-2025-57578

CVE-2025-57578 affects H3C Magic M Device M2V100R006. The vulnerability arises from the use of the default password, enabling a remote attacker to execute arbitrary code over the network with low privileges required and user interaction needed. The available connected documents confirm the affect...

PT-2025-36524

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.11 Description: WeGIA is a Web manager for charitable institutions. An arbitrary file upload issue exists due to insufficient file type validation. The application only checks MIME types for Excel files at the...

Linux Distros Unpatched Vulnerability : CVE-2024-45691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose...

Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.

...

AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals

Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform...

SUSE CVE-2025-38557

In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...

CVE-2025-38557

In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...

UBUNTU-CVE-2025-38557

In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...

CVE-2025-38557

In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...

MAL-2025-25773 Malicious code in magic-script (npm)

The package magic-script was found to contain malicious code...

MAL-2025-35660 Malicious code in test-mlw2-leats-magic-siege-silky (npm)

The package test-mlw2-leats-magic-siege-silky was found to contain malicious code...

Malicious code in magic-script (npm)

The package magic-script was found to contain malicious code...

Malicious code in test-mlw2-mikes-straw-magic-rurps (npm)

The package test-mlw2-mikes-straw-magic-rurps was found to contain malicious code...

MAL-2025-15156 Malicious code in availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr (npm)

The package availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr was found to contain malicious code...

Malicious code in test-mlw2-leats-magic-siege-silky (npm)

The package test-mlw2-leats-magic-siege-silky was found to contain malicious code...

Malicious code in availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr (npm)

The package availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr was found to contain malicious code...

Hive Pro’s Gartner Recognition in the Hype Cycle for Security Operations 2025: What It Means for Security Leaders and the Future of Cybersecurity

Cybersecurity is a race against time, threat actors and attacks. And the industry’s wish has also come true, cybersecurity is becoming a boardroom conversation requiring more of the CISO’s attention. On the other hand, regulatory pressures, expanding attack surfaces, and relentless adversaries...

CVE-2025-8391

The Magic Edge – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8391

CVE-2025-8391 – Magic Edge – Lite (WordPress) is a Stored Cross-Site Scripting vulnerability in the plugin for all versions up to 1.1.6, triggered by the height parameter due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or...